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A method for processing of data that is to be 
5/ protected, comprising the meapure of storing the data 
I as encrypted data element vallies ( DV ) in records ( P ) in 
a first database ( 0-DB ) , eacli data element value being 
linked to a corresponding dara element type (DT), 
characterised by /the steps of 

storing in a second database ( lAM-DB ) a data element 
protection catalogue ( DC ) , y^hich for each individual data 
element type (DT) contains ibne or more protection attri- 
butes stating processing rules for data element values 
(DV), which in the first database (0-DB) are linked to 
the individual data element type ( DT ) , 

for each user-initiatjed measure aiming at processing 
of a given data element vdlue (DV) in the first database 
(O-DB), initially producimg a compelling calling to the 
data element protection datalogue for collecting the pro- 
tection attribute/attributes associated with the corre- 
sponding data element type, and 

compellingly controlling the user's processing of 
the given data element y-alue in conformity with the col- 
lecte d protection attripute/attributes . 

2. A method as claimed in claim 1, further compris- 
ing the measure of storing the protection 

attribute/attributes of the data element protection cata- 
logue ( DC ) in encrypted form in the second database 
( lAM-DB ) and, when collecting protection attribute/attri- 
butes from the data element protection catalogue (DC) 
effecting decryption thereof. (jj^^'i /y\ \ 

3 . A method as claimed in -any r^y^ r o f t h t: pr c c c c lTng 
-eieims^ wherein each record (P^) in the first database 

(0-DB) has a record identifier, and wherein the method 
further comprises the measure of storing the record iden- 
tifier in encrypted form (SID) in the first database 



(0-DB) . 
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4. A method as claimed In 



3 



of -bho prccading' 
cljilms , wherein the encryption ^o/ data in the first data- 
base (O-DB) and/or the encryptioSn of data in the second 
database (lAM-DB) is carried o^t in accordance with the 
PTY principle with floating storage identity. 
^""^ " 5 . A method as claimed iri^ ef/^^one^ of the pre eed^ng- 
-ei-axms", wherein the protection attribute/attributes of 
the data element types comprise attributes stating rules 
for encryption of the corresponding data element values 
in the first database (O-DB). / - , 

6 . A method as claimed in - nny r >i i < a of t he prcG o d ing 

<*a±HH3-, wherein the protection attribute/attributes of 
the data element types comprise attributes stating rules 
for which program/programs or program versions is/are 
allowed to be used for managing the corresponding data 
element values in the first database (Q-DB). 



of the precedin g ■ 
^ i^ ldlius , wherein the protection attribute/attributes of 

the data element values comprise attributes stating rules 
20 for logging the corresponding data element values in the 
. first database (O-DB). 
^j^Jj^^^^y^'^^^^^^^"-^'^ apparatus for processing da^a that is to be 
1 /protected, comprising a first databasfe (O-DB) for stor- 
jr ing said data as encrypted data elemfent values (DV) in 
records (P), each data element value being linked to 
a corresponding data element type /{TtT) , charac 
t e r i s e d by 

a second database (lAM-DB) ytor storing a data ele- 
ment protection catalogue (UC) / which for each individual 
data element type ( DT ) containfe one or more protection 
attributes stating processing^ rules for data element 
values (DV), which in the f^st database (O-DB) are 
linked to the individual daft:a element type (DT), 

means which are adaptfed, in each user-initiated mea- 
sure aiming at processincf a given data element value (DV) 
in the first database (O-DB), to initially produce a 
compelling calling to ^he data element protection cata- 
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logue for collecting the prote^JtitSnattribute/attributes 
associated with the cor^ceSponding data element types, and 

means which^^ai'^adapted to compellingly control the 
user's prop:€S^ing of the given data element value in con- 
5 formity^ith the collected protection attribute/attri- 
butes^ 



